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USL/DBMS NASA/ PC BAD PROJECT ”C” PROGRAMMING STANDARDS 

This document establishes a set of progranxning standards 
intended to promote reliability, readability, and portability of 
"C" programs written for PC RAD development projects. These 
standards must be adhered to except where reasons for deviation 
are clearly identified and approved by the PC RAD team. 
Application for approval is made by completing the USL/DEMS 
NASA/PC RAD Form Number DIMS. NASA/PC FORM- 1 , "Request for 
Deviation from C Progranxning Standards,” in Appendix A. Any 
approved deviation from these standards must also be clearly 
documented in the pertinent source code. 

Two companion documents address other system development 
aspects, they are : 

1) "NASA/PC RAD System Design Standards,” USL/D»!S NASA/PC 
RAD Working Paper Series Report Number DBMS. NASA/PC RAD-12, 
October 12, 1984. 

2) "NASA/PC RAD System Testing Standards,” USL/DBMS 
NASA/ RECON Working Paper Series Report Number DIMS. NASA/PC 
RAD-13, October 12, 1984. 

Software systems and the procedures used to develop them must 
conform to the standards established in each of these 
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specification documents, as well as the standards contained 
within this document. 

Many of the reconxnendat ions contained in this document were 
suggested in Q Programming Guidelines by Dr. Thomas Plum (Plum 
Hall Publishing, 1984) and are used with the permission of the 
author. This book contains many enlightening examples and is 
highly reconxnended. 


DATA AND VARIABLES 


Variable names 

Variable names should be in lower case and distinct within 
the first eight characters to assure portability. Longer 
variable names will improve readability. Declarations should 
be in alphabetical order within type and formatted so that 
names, types, and comnents line up in vertical columns. 
Additionally, variable names should be meaningful and 
consistent throughout the program. 

Constant s 

All program constants should be defined in either include 
files for constants relevant to multiple files or at the 
beginning of the source file for constants relevant to only 
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i 

I 

one program. Constant names should be capitalized and 
meaningful . 

Machine Dependency 

Programs should not depend on machine specific attributes 
such as byte order, word length, or implicit conversion for 
correct operation. Use only standard defined constructs and 
standard conversion functions. 

i 

CONTROL STATEMENTS 

Control Structure 

Each line that is part of the body of a ”C" control 
structure should be indented eight character positions from j 

the margin of the controlling line. This extends to function 

! 

definition, structure declaration, and aggregate 

! 

initializers. 

Else-If 

The "else-if” construct should be used in multiple choice 
situations whenever conditions are not mutually exclusive, 
when order of evaluation is important, or when multiple i 

variables are tested. Otherwise a switch (case) statement 
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should be used. 

Goto Statements 

The "goto” statement should not be used since it degrades 
both reliability and readability. The while loop is 
appropriate to situations where "goto" functionality is 
desired. 

FUNCTIONS AND MODULES 


Function Format 

An explanatory conanent at the left margin is required before 
each function. Each parameter should have an associated 
comnent describing it. Function definitions and external 
variable declarations also begin at the left margin. 

Inc 1 ude Files 

Include files unique to a project should be included using 
the syntax include "path" while standard include files 
should be included by include <path>. Path references are 
used only to facilitate compilation within a development 
directory. This will be changed with the next release of the 
operating system since it allows links. Include files should 
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not be nested and should be entered at the beginning of any 
source file. Include files should not contain 
initializations . 

Source File Size 

Source file size should be less than 500 lines since larger 
files are difficult to edit. Functions should be less than 
one page long (50 lines). 

Scope Rules 

Data should be local unless global referencing is necessary. 
Argument passing is preferred where data is only transferred 
to a function unless the data is being "passed through” for 
two or more levels. 

Library Functions 

Frequently used functions should have separate source files 
which should contain a short main program which can be 
conditionally compiled by setting a standard compile flag. 
This main program should execute a functional test of the 
library procedure. The compile flag name should reflect the 
name of the library procedure. Programs should interact with 
the environment through standard or library functions only 
and should assume nothing else about the environment. 
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Necessary environment dependencies should be isolated into 
small well documented functions. 

Macros 

Macros should be named in upper case and defined in the 
standard project include file. Replacement text should be 
parenthesized, as well as each parameter of the replacement 
text to prevent precedence difficulties. 

Defined Types 

Defined types should be written in upper case in order to 
recognize them as such in structure definitions. 

GENERAL STANDARDS 


Conment s 

A function which does a simple transformation on its 
arguments can be documented by a one- line header comment of 
the form ”<verb> <objects>”. Larger and more complicated 
functions should contain a description of major data 
structures and should describe the flow of control in a 
clear pseudo-code form. This is documentation in addition to 
the previously discussed parameter description. Any changes 
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should also be included and should reference a dated "change 
log” entry. Individual statements may need clarification and 
such comnents should be included adjacent to the statement. 

Specificati ons 

A program must be clearly associated with an external 
specification document and there must be a makefile 
containing the names of all external source files necessary 
to the program. 

Conformance Reviews 

Programs produced for release must be reviewed by at least 
one person other than the progranxner for conformance to 
these standards. A reviewer’s concurrence means ”1 have read 
all of the associated code and its corresponding 
specification. It is understandable and conforms to its 
specification and to all applicable standards”, and is 
signified by completion of USL/DHMS NASA/PC RAD Form Number 
DIMS. NASA/PC FORM-2, "Quality Assurance Conformance Review 
Report,” in Appendix B. 

This document is intended to help assure the manta inabi 1 i ty and 
int egrab i 1 i ty of systems developed under the USL NASA/PC RAD 
project. Attention paid to these specifications from the 
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beginning of a design effort will be paid for many times over in 
saved debugging and maintenance effort. 


I DBMS .NASA/ PC BAD- 11 I 


9 


I WORKING PAPER SERIES I 


I N A S A I 


I N A S A I 


APPENDIX A 

DIMS .NASA/ PC FQKM1 

REQUEST EQR DEVIATION FROM 2£1 PROGRAMMING STANDARDS 

Requestor: Date: 

Task Identification : 

Specific Program(s) orModule(s) Involved : 

Nature of Requested Deviation : 


Reason for Requesting Deviation: 


Re comnendat ion : 
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APPENDIX B 
DBMS. NASA/ PC FORM- 2 

QUALITY ASSURANCE CONFORMANCE REVIEW REPORT 

Reviewer: Date: 

Task Identification: 


Specification Document(s): 


Specific Program(s) or Module(s) Reviewed : 


Rate These Aspects ( l=poor to 5=excellent) and Explain. 

1) Conformance to Specification Document 


2) Conformance to Programning Standards 


3) Clarity of Code 

4) Documentation Completeness 


Additional Comments: 


Recomnendat ion: 
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